From e0e95e95e469fa0341a8339a9c9869525a32e978 Mon Sep 17 00:00:00 2001
From: GeekCorner <45696571+GeekCornerGH@users.noreply.github.com>
Date: Tue, 10 Jan 2023 09:41:35 +0100
Subject: [PATCH] fix (2fa.directory): Allow api.2fa.directory, and remove
2fa.directory
---
src/util.rs | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/util.rs b/src/util.rs
index 3297fad5..fe99e2d3 100644
--- a/src/util.rs
+++ b/src/util.rs
@@ -50,7 +50,7 @@ impl Fairing for AppHeaders {
// Have I Been Pwned and Gravator to allow those calls to work.
// # Connect src:
// Leaked Passwords check: api.pwnedpasswords.com
- // 2FA/MFA Site check: 2fa.directory
+ // 2FA/MFA Site check: api.2fa.directory
// # Mail Relay: https://bitwarden.com/blog/add-privacy-and-security-using-email-aliases-with-bitwarden/
// app.simplelogin.io, app.anonaddy.com, api.fastmail.com, quack.duckduckgo.com
let csp = format!(
@@ -73,7 +73,7 @@ impl Fairing for AppHeaders {
{icon_service_csp}; \
connect-src 'self' \
https://api.pwnedpasswords.com \
- https://2fa.directory \
+ https://api.2fa.directory \
https://app.simplelogin.io/api/ \
https://app.anonaddy.com/api/ \
https://api.fastmail.com/ \